$ rpki-client -vvf repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.mft File: 6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.mft (raw, json) Hash identifier: ixAHyRvoT+vaXjx6Z+X8kUypVieKXgnBggD+WIkDcko= Subject key identifier: B1:AF:79:C2:E3:74:B4:5D:EE:A5:1C:59:D4:49:AA:7C:92:42:BE:D6 Authority key identifier: 6D:F8:A8:73:B7:0B:A8:CC:AD:A3:1A:AD:D8:21:5F:F7:D0:2F:47:E8 Certificate issuer: /CN=6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8 Certificate serial: 549EAF3F735B39E076CA9DF844BC75B4F76E8B15 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.mft Manifest number: 01BF Signing time: Tue 05 Aug 2025 15:30:39 +0000 Manifest this update: Tue 05 Aug 2025 15:25:39 +0000 Manifest next update: Sat 09 Aug 2025 00:47:39 +0000 Files and hashes: 1: 3130332e3132362e3131362e302f32342d3234203d3e20313338313136.roa (hash: JQnrpdZbIEjOMrJ0gY+bWa1ZiQUgvaTVgcxr/pouQFw=) 2: 3130332e3132362e3131382e302f32342d3234203d3e20313338313136.roa (hash: IZ8KmdFwK5i2F35Ti/yV73rwyTaK/R/VAzY82jFEZs8=) 3: 6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.crl (hash: HpFVzrvOLzhOg6vMN+LzcOSeQbk6q4l1V4M5wID73j8=) 4: 3130332e3132362e3131372e302f32342d3234203d3e20313338313136.roa (hash: jIRxROaY+ZsyLOueu1pqPluvRpe9DT1746X5+JI8kKs=) 5: 3130332e3132362e3131392e302f32342d3234203d3e20313339393732.roa (hash: nPlUaL9yF2n402rwq54ga4y4IA8tmh1JYztdhgr/yzQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.crl rsync://repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 00:47:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:9e:af:3f:73:5b:39:e0:76:ca:9d:f8:44:bc:75:b4:f7:6e:8b:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8 Validity Not Before: Aug 5 15:25:39 2025 GMT Not After : Aug 9 00:47:39 2025 GMT Subject: CN=B1AF79C2E374B45DEEA51C59D449AA7C9242BED6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ca:43:13:d4:f9:cf:95:04:e0:03:89:9a:74: 84:ad:69:77:62:1c:9e:fa:6b:cb:61:3a:8d:04:ce: e8:98:12:56:0d:c6:f7:fd:42:e3:a0:c6:86:a2:c7: ff:88:26:16:ff:77:c2:21:e3:40:89:ce:19:99:5a: 19:52:77:c8:3b:00:bf:d8:b5:cc:1d:28:8d:ba:4d: 07:b6:d8:95:5c:87:42:41:5b:fd:c0:7b:3d:25:45: 37:43:06:76:eb:21:a8:ab:f5:17:82:9f:2c:eb:90: 7d:3c:f6:87:01:ce:f5:77:87:07:3b:2c:5e:9e:04: eb:35:ff:1e:fd:01:94:08:fa:e6:ed:3c:b5:d3:4c: 27:63:9b:23:3c:e1:be:44:c3:ec:26:33:93:93:f4: 94:54:74:69:9c:ae:90:01:c2:9f:ea:cf:50:e4:30: 4e:10:63:7d:39:66:92:26:4c:2d:ea:f0:15:d1:8c: a5:e6:24:66:ab:ad:cb:84:f6:a1:dd:5c:64:f4:1c: 80:13:f4:d3:df:31:02:34:6b:97:d5:57:3d:6e:b2: ad:d8:9b:0d:74:f1:c8:7c:79:c3:7e:7f:97:e9:0b: 31:c2:05:f6:98:c6:8a:8e:2f:26:27:5e:2f:3f:46: ac:34:ec:c8:fb:ca:c5:6e:d5:a0:11:97:dc:ff:24: 71:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:AF:79:C2:E3:74:B4:5D:EE:A5:1C:59:D4:49:AA:7C:92:42:BE:D6 X509v3 Authority Key Identifier: keyid:6D:F8:A8:73:B7:0B:A8:CC:AD:A3:1A:AD:D8:21:5F:F7:D0:2F:47:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:e2:74:8b:2b:8f:76:1e:bb:64:74:3f:a7:92:18:63:e2:f5: 0f:f7:0d:2e:3d:46:c2:01:9f:35:3d:1d:ae:2b:4b:7c:01:a4: 0e:a5:40:8d:ff:f1:de:93:f6:0c:91:d0:e8:65:03:2b:6c:55: 3c:a0:dd:7d:4f:b9:c3:8c:87:c1:d0:a4:cf:51:03:b6:74:10: f6:3c:d8:c9:a2:85:d0:f6:3c:82:a1:29:63:1b:e2:e8:00:01: 59:02:86:06:63:24:5e:03:54:fc:c0:0c:92:4b:62:bc:ca:b2: 0f:a4:21:a5:15:f9:6d:bb:8d:4f:38:26:5b:0a:b5:19:bc:71: 38:b5:cc:99:55:0b:58:3a:c0:8c:28:01:09:1e:a7:18:59:f7: 4e:b5:3d:f0:41:3b:6a:c0:e0:ff:bc:54:73:97:bf:a0:a0:80: cc:be:6a:f9:b9:93:be:eb:0f:18:aa:0a:d9:b1:b1:ba:49:e5: e2:d1:9b:af:59:94:fb:1e:6c:0b:e5:e9:79:6e:f9:b8:d6:f5: 37:5e:96:14:30:3a:e8:a0:8a:06:79:b8:32:1d:ff:f2:d8:2f: bb:0b:df:7a:da:bb:da:98:84:9e:5e:0f:72:4b:cc:b4:f1:c3: f5:75:7f:fa:1c:67:48:d5:4a:b9:e1:46:ec:1d:77:f8:c2:61: 4a:de:70:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVJ6vP3NbOeB2yp34RLx1tPduixUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkRGOEE4NzNCNzBCQThDQ0FEQTMxQUFERDgyMTVGRjdE MDJGNDdFODAeFw0yNTA4MDUxNTI1MzlaFw0yNTA4MDkwMDQ3MzlaMDMxMTAvBgNV BAMTKEIxQUY3OUMyRTM3NEI0NURFRUE1MUM1OUQ0NDlBQTdDOTI0MkJFRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+ykMT1PnPlQTgA4madIStaXdi HJ76a8thOo0EzuiYElYNxvf9QuOgxoaix/+IJhb/d8Ih40CJzhmZWhlSd8g7AL/Y tcwdKI26TQe22JVch0JBW/3Aez0lRTdDBnbrIair9ReCnyzrkH089ocBzvV3hwc7 LF6eBOs1/x79AZQI+ubtPLXTTCdjmyM84b5Ew+wmM5OT9JRUdGmcrpABwp/qz1Dk ME4QY305ZpImTC3q8BXRjKXmJGarrcuE9qHdXGT0HIAT9NPfMQI0a5fVVz1usq3Y mw108ch8ecN+f5fpCzHCBfaYxoqOLyYnXi8/Rqw07Mj7ysVu1aARl9z/JHG3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsa95wuN0tF3upRxZ1EmqfJJCvtYwHwYDVR0j BBgwFoAUbfioc7cLqMytoxqt2CFf99AvR+gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 N2QyNmRlMC02OGNmLTQyOWMtOGIwZS04ZDY0Yjc2MmY4MjQvMC82REY4QTg3M0I3 MEJBOENDQURBMzFBQUREODIxNUZGN0QwMkY0N0U4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNkRGOEE4NzNCNzBCQThDQ0FEQTMxQUFERDgyMTVGRjdEMDJG NDdFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTdkMjZkZTAtNjhjZi00MjljLThi MGUtOGQ2NGI3NjJmODI0LzAvNkRGOEE4NzNCNzBCQThDQ0FEQTMxQUFERDgyMTVG RjdEMDJGNDdFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKTidIsrj3Yeu2R0P6eSGGPi9Q/3DS49RsIB nzU9Ha4rS3wBpA6lQI3/8d6T9gyR0OhlAytsVTyg3X1PucOMh8HQpM9RA7Z0EPY8 2MmihdD2PIKhKWMb4ugAAVkChgZjJF4DVPzADJJLYrzKsg+kIaUV+W27jU84JlsK tRm8cTi1zJlVC1g6wIwoAQkepxhZ9061PfBBO2rA4P+8VHOXv6CggMy+avm5k77r DxiqCtmxsbpJ5eLRm69ZlPsebAvl6Xlu+bjW9TdelhQwOuigigZ5uDId//LYL7sL 33rau9qYhJ5eD3JLzLTxw/V1f/ocZ0jVSrnhRuwdd/jCYUrecEc= -----END CERTIFICATE-----Generated at Thu Aug 7 00:26:23 2025 by rpki-client